Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
CVE-2026-55415: Schema Import Injection
Gain code execution by injecting Python through a crafted JSON Schema when the generated Pydantic model is imported.
|
 |
9 | PRO | |
|
|
SOAPBridge: Savon WSDL Code Injection
Gain code execution through an unsafe module_eval call during WSDL import.
|
|
8 | PRO | |
|
CVE-2026-XX957
This challenge covers the review of a CVE in a typescript codebase and its patch
|
< 1 Hr. |  |
49 | PRO |
|
|
CVE-2026-XX464
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
49 | PRO | |
|
|
CVE-2026-XX792
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
44 | PRO | |
|
|
CVE-2026-XX242
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
61 | PRO |
|
|
CVE-2026-XX738
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
60 | PRO |
|
|
CVE-2024-X7X95
This challenge covers the review of a CVE in a JavaScript codebase and its patch
|
< 1 Hr. | |
46 | PRO |
|
|
CVE-2025-XXXXX
This challenge covers the review of a CVE in a JavaScript codebase and its patch
|
< 1 Hr. | |
51 | PRO |
|
|
CVE-2026-XX27
This challenge covers the review of a CVE in a javascript codebase and its patch
|
|
56 | PRO | |
|
|
CVE-2026-XX822
This challenge covers the review of a CVE in a typescript codebase and its patch
|
< 1 Hr. | |
61 | PRO |
|
|
CVE-2026-XX292
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
59 | PRO | |
|
|
CVE-2026-XX762
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
75 | PRO |
|
|
CVE-2026-XX230
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
76 | PRO |
|
|
CVE-2026-XX928
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
68 | PRO |
|
|
CVE-2026-XX953
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
88 | PRO |
|
|
CVE-2026-XX977
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
80 | PRO |
|
|
CVE-2026-XX130
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
78 | PRO |
|
|
CVE-2023-51XX9
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
80 | PRO |
|
|
CVE-2026-XX790
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
74 | PRO |
|
|
CVE-2023-3X829
This challenge covers the review of a CVE in a Python codebase and its patch
|
|
97 | PRO | |
|
|
CVE-2026-2413X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
75 | PRO |
|
|
CVE-2026-21XX3
This challenge covers the review of a CVE in a Python codebase and its patch
|
< 1 Hr. | |
73 | PRO |
|
|
CVE-2025-X23XX
This challenge covers the review of a CVE in a javascript codebase and its patch
|
|
103 | PRO | |
|
|
CVE-2025-X9X28
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
100 | PRO | |
|
|
CVE-2024-X170X
This challenge covers the review of a CVE in a JavaScript codebase and its patch
|
|
126 | PRO | |
|
|
CVE-2026-XX871
This challenge covers the review of a CVE in a python codebase and its patch
|
|
106 | PRO | |
|
|
CVE-2026-XX951
This challenge covers the review of a CVE in a javascript codebase and its patch
|
|
102 | PRO | |
|
|
CVE-2025-XX662
This challenge covers the review of a CVE in a python codebase and its patch
|
|
113 | PRO | |
|
|
CVE-2026-X189X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
116 | PRO |
Showing 1–30 of 193 exercises
Free Labs of the Month
